Who We AreAt Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive setting where your well-being is prioritized and your potential can thrive.The RoleWe are looking for a hands-onMicrosoft Azure Engineerto design, build, and operate secure, scalable Azure environments. You will play a key role in establishing and evolvingAzure Cloud Landing Zones, enablingDevOps and CI/CD, deliveringInfrastructure as Code (IaC), executingcloud migrations, and implementing strongsecurity and governancecontrols across the platform.This role suits someone who enjoys building repeatable cloud foundations, automating everything possible, and partnering with application, infrastructure, and security teams to modernize workloads safely and efficiently.Key ResponsibilitiesCloud Landing Zones & Platform EngineeringDesign and implementAzure Cloud Landing Zonesaligned to theMicrosoft Cloud Adoption Framework (CAF)and enterprise best practices.Build and manage core platform components, including:Management groups, subscriptions, and resource organizationStandardized networking(hub-spoke or vWAN patterns), DNS, routing, and segmentationIdentity integration(Microsoft Entra ID), RBAC, and privileged access approachesImplement and maintaingovernance guardrailsusingAzure Policy/Initiatives, management group hierarchy, tagging standards, and compliance baselines.Define standard patterns for workload onboarding, including subscription vending, baseline monitoring, and security controls.DevOps & AutomationBuild and maintainCI/CD pipelinesand automation workflows usingAzure DevOps and/or GitHub Actions .Enable “platform as a product” capabilities, providing reusable templates and self-service provisioning for engineering teams.Automate operational tasks usingPowerShell, Azure CLI, Bash, or Python .Implement Git-based practices (branching strategy, code reviews, approvals, release management) to support safe, auditable deployments.Infrastructure as Code (IaC)Develop and maintain infrastructure usingTerraform and/or Bicep (ARM)with modular, reusable design.Implementpolicy-as-code, configuration standards, and environment promotion strategies (dev/test/prod).Create and manage secure state handling, secrets management, and pipeline-integrated validations (linting, security scanning, drift detection).Document and version IaC modules to accelerate delivery and reduce operational risk.Cloud Migrations & ModernizationPlan and execute migrations using tools such asAzure Migrate ,Azure Site Recovery, and other migration frameworks.Support migration strategies includingrehost, re-platform, refactor, retire, retain .Coordinate with application owners to migrate workloads such as:Virtual machines and VM estatesDatabases (usingAzure Database Migration Service, where applicable)Web apps and APIs (App Service, container platforms, AKS)Establish cutover plans, rollback strategies,



and post-migration stabilization processes.Securing the Cloud (Security & Compliance)Implement cloud security best practices across identity, network, data, and platform layers:Microsoft Defender for Cloudrecommendations and secure score improvementsNetwork security controls:NSGs ,Azure Firewall ,WAF ,DDoS ,Private Link/Private EndpointsSecrets and key management usingAzure Key Vaultand managed identitiesLogging/monitoring security integration usingAzure Monitor ,Log Analytics, and optionallyMicrosoft SentinelPartner with security stakeholders to enforce security standards and support audits/compliance requirements (e.G., CIS guidance, internal baselines).Who You AreRequired QualificationsStrong hands-on experience engineering solutions inMicrosoft Azure(typically3+ yearsAzure-focused, depending on level).Demonstrated experience implementing or operatingAzure Landing Zones/ enterprise Azure foundations.Strong IaC experience withTerraform and/or Bicep/ARM(modules, standards, environments, pipelines).Solid DevOps experience building CI/CD workflows usingAzure DevOps and/or GitHub Actions .Migration experience supporting cloud adoption and workload transitions to Azure.Working knowledge of core Azure services, including:Azure Networking (VNets, peering, routing, DNS, Private Endpoints)Identity & Access (Entra ID, RBAC, PIM concepts)Compute and platform services (VMs, App Service, Storage, AKS basics)Monitoring (Azure Monitor, Log Analytics)Scripting and automation skills withPowerShell, Azure CLI, Bash, and/or Python .Ability to write clear documentation and collaborate across engineering, infrastructure, and security teams.Preferred Qualifications (Nice to Have)Experience with theAzure CAFmethodology and enterprise-scale architecture patterns.Strong background in cloud security architecture and operations, including:Defender for Cloud, Sentinel, vulnerability management, secure workload patternsExperience with Kubernetes/containers (AKS, ACR, container security concepts).Knowledge ofFinOpspractices (cost allocation, tagging policies, budgets, optimization).Experience with hybrid connectivity and enterprise networking:ExpressRoute, VPN Gateway, vWAN .Familiarity with SRE/operational best practices (SLIs/SLOs, error budgets, postmortems).Certifications (Preferred)AZ-104(Azure Administrator)AZ-305(Azure Solutions Architect)AZ-400(DevOps Engineer)Security:SC-100 / SC-200(or equivalent experience)Terraform certification (HashiCorp) is a plusKey Skills & ToolsAzure: Landing Zones, Policy, Management Groups, Networking, Key Vault, Monitor, Defender for CloudIaC: Terraform, Bicep/ARM (Pulumi optional)DevOps: Azure DevOps, GitHub Actions, Git, CI/CDScripting: PowerShell, Azure CLI, Bash, PythonSecurity: RBAC, PIM concepts, Private Link, Firewall/WAF, logging/SIEM patternsMigration: Azure Migrate, ASR, DMS (as applicable)Salary:



$114,740 - $164,740Salary ranges will vary based on factors such as location, skills, experience, education, and qualifications for the role. Kyndryl’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards.Being YouThe “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.What You Can ExpectYour career with us isn’t just a job—it’s an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and enables you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best.From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute—you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success.We want you to thrive here—and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next.Get Referred!If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact 's Kyndryl email address.Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.#J-18808-Ljbffr

📌 Microsoft Azure Engineer - $114,740 - $164,740 A Year (Toronto)
🏢 Kyndryl
📍 Toronto